For general questions and discussions specific to the AbleCommerce 7.0 Asp.Net product.
-
compunerdy
- Admiral (ADM)
- Posts: 1283
- Joined: Sun Nov 18, 2007 3:55 pm
Post
by compunerdy » Wed Nov 20, 2013 10:04 am
I had some strange errors I have never seen before.. Is this just someone trying to access pages?
Code: Select all
11/20/2013 7:02:24 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/Errors/GeneralError.aspx?aspxerrorpath=/App_Themes/YomLocation: The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed.
11/20/2013 4:40:59 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/Errors/GeneralError.aspx?aspxerrorpath=/App_Themes/YomLocation: The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed.
11/20/2013 3:32:08 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/Errors/GeneralError.aspx?aspxerrorpath=/App_Themes/YomLocation: The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed.
11/20/2013 2:44:17 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/YomLocation: A potentially dangerous Request.Path value was detected from the client (:).
-
Katie
- AbleCommerce Admin
- Posts: 2651
- Joined: Tue Dec 02, 2003 1:54 am
-
Contact:
Post
by Katie » Wed Nov 20, 2013 1:12 pm
I have no idea, but there is no folder named /Errors/ in any of our themes. Must be something that was added after installation.
The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed
-
compunerdy
- Admiral (ADM)
- Posts: 1283
- Joined: Sun Nov 18, 2007 3:55 pm
Post
by compunerdy » Wed Nov 20, 2013 2:37 pm
There is not a errors folder under app_themes on my server either..
So somehow the file at '/App_Themes/Errors/GeneralError.aspx' is getting called and since there is no such file it gives a error..
-
Katie
- AbleCommerce Admin
- Posts: 2651
- Joined: Tue Dec 02, 2003 1:54 am
-
Contact:
Post
by Katie » Wed Nov 20, 2013 5:11 pm
There is an \Errors\GeneralError.aspx file that is referenced by the web.config.
<customErrors mode="Off" defaultRedirect="~/Errors/GeneralError.aspx">
<error statusCode="404" redirect="~/Errors/PageNotFound.aspx"/>
</customErrors>
Something that seems suspicious is "YomLocation" within .../YomLocation: A potentially dangerous Request.Path value was detected from the client
You might want to make sure your customErrors are turned "On". This will prevent someone from trying to access pages that could give an error.
-
compunerdy
- Admiral (ADM)
- Posts: 1283
- Joined: Sun Nov 18, 2007 3:55 pm
Post
by compunerdy » Wed Nov 20, 2013 8:22 pm
Here is what it says in my web.config
Code: Select all
<customErrors mode="On" defaultRedirect="~/Errors/GeneralError.aspx">
<error statusCode="404" redirect="~/Errors/PageNotFound.aspx" />
</customErrors>
-
jmestep
- AbleCommerce Angel
- Posts: 8164
- Joined: Sun Feb 29, 2004 8:04 pm
- Location: Dayton, OH
-
Contact:
Post
by jmestep » Thu Nov 21, 2013 6:15 am
I have seen weird errors like that from McAfee running the site- they test a lot of urls that don't exist. I have also seen them for search engines like bing bot. I had to email Microsoft abuse once a couple of years ago because they were garbling urls up so badly they were producing hundreds of errors while spidering. To my surprise, they were able to stop the bot.